What are your rights?

If we need to use your personal information for any reasons beyond those stated in this privacy notice, we will discuss this with you and ask for your explicit consent. Data Protection Legislation gives you certain rights, including the right to:

  • Request access to the personal information we hold about you, e.g. in health records. The way in which you can access your own health records is further explained in our ‘Subject Access Request Policy’.
  • Request the correction of inaccurate or incomplete information recorded in our records, subject to certain safeguards. This is also explained in our ‘Subject Access Request Policy’.
  • Refuse/withdraw consent to the sharing of your health records: Under Data Protection Legislation we are authorised to process, i.e. share, your health records ‘for the management of healthcare systems and services’. Your consent will only be required if we intend to share your health records beyond these purposes, as explained above (e.g. research). Any consent form you will be asked to sign will give you the option to ‘refuse’ consent and will explain how you can ‘withdraw’ any given consent at a later time. The consent form will also warn you about the possible consequences of such refusal/withdrawal.
  • Request your personal information to be transferred to other providers on certain occasions.
  • Object to the use of your personal information: In certain circumstances you may also have the right to ‘object’ to the processing (i.e. sharing) of your information where the sharing would be for a purpose beyond your care and treatment (e.g. as part of a local/regional data sharing initiative). This so called ‘‘Data Opt-out’ initiative, developed by Dame Caldicott, commenced in March 2018 and will conclude in March 2020. Further information can be found on the following website: https://digital.nhs.uk/national-data-opt-out
  • We will always try to keep your information confidential and only share information when absolutely necessary.

If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter further.